FLoC to It – How the Federated Learning of Cohorts Affects Privacy

Estimated Reading Time: 5 minutes

The Privacy Sandbox is Google’s proposed solution for marketers reacting to the announcement that third-party cookies in Google Chrome are set to become obsolete. 

However, there are a number of different proposals and solutions being built in the Privacy Sandbox, all in varying stages of development. The Federated Learning of Cohorts (FLoC), the proposal with the most publicity and commentary to date, is one such proposal. 

What is FLoC and how could it affect privacy concerns moving forward?

Goal 

To place relevant ads on a site; all advertising is personalized and based upon general information about the interests of the user.

Traditional “Pre-Privacy” Solution

Personalized (“relevant”) ads for users today are displayed using third-party cookies. An advertising network is able to associate pages/domains that are collected with an associated ID as a user navigates across the web. This mass collection of the ID (stored in a third-party cookie) along with the page context allows the network to develop a profile of the user and then place them into interest categories (users in the market for athletic shoes, dog lovers, etc.). 

Advertisers then have a particular ad and define the audience profile to whom that ad should be shown. The ad network is then able to use the profiles of users they have created and match those against the audience profile parameters that advertisers have defined. They can match up those “relevant ads” and show them to the profiles (cookie IDs) they deem them relevant. The ad serving here is also accomplished via the third-party cookie ID. 

What Happens When Third-Party Cookies Are Deprecated?

Without third-party cookies, there is no technical mechanism via which to set a unique identifier on the user’s device (meaning there is no cross-site browsing data for purposes of profile creation). Without the ability to create these profiles, there is no way to display personalized “relevant” ads outside of one-to-one direct relationships with single publishers that maintain their own first-party cookie repositories (and profiles).

Beyond profile building, without a third-party cookie there is no way to target and display a specific ad to a specific user (profile) across the web.

The FLoC proposal is a technical mechanism that displays relevant ads to interest-based audiences despite the elimination of third-party cookies.

How the “Post-Privacy” Solution Works

Browsing data (page URLs, page metadata, etc.) is not passed with a unique identifier to advertising platforms. Instead, the browser collects encrypted information about the pages a user accesses locally. Using machine learning within the browser, it then places the user/device in an interest cohort based upon the observed browsing history. Anonymity is maintained as the browser ensures there are a limited number of cohorts and each includes thousands of users.

Instead of making a unique identifier (such as a third-party cookie value) available to advertising platforms for the user/device, the cohort ID is made available. This allows ads to be targeted based upon cohorts and measurement to happen based upon cohorts for campaign optimization. From a first-party data collection perspective, you could also collect the cohort ID for users of your site(s) in order to better identify who is your most relevant and valuable audience. 

Current Status of the “Post-Privacy” Solution

Google ran simulations based upon the principles defined in the FLoC proposal. A January 25, 2021 announcement stated that “tests of FLoC to reach in-market and affinity Google audiences show that advertisers can expect to see at least 95% of the conversions per dollar spent when compared to cookie-based advertising.” It is important to keep in mind that this first round of tests were Google simulations and not public on the open web. Chrome made FLoC-based cohorts available for public testing through an origin trial with the release of Chrome 89 on March 9, 2021. With this release, the application programming interface (API) now allows working with these interest-based cohorts.

Relevant Privacy Regulatory Considerations

Accessing a user’s cohort still requires accessing the user’s device. It is reasonable to assume that the consent requirements for EU users would still be in effect under country-specific legislation as directed by the ePrivacy directives. It is unclear if the behavior of the browser itself running this kind of profiling will be deemed permissible by data protection authorities across Europe and the rest of the globe. Due to this concern, Google is holding off on opening testing of FLoC in Europe while privacy questions are addressed.

What an Advertiser Can Do Today to Prepare

Begin collecting the cohorts of users in analytics. Using this information, you can begin testing and assessing conversion rates, as well as begin modeling for audience creation based upon cohorts. This will be a future strategy for audience creation and targeting.

Further Reading

Contact InfoTrust

Learn more about InfoTrust's analytics and consumer data governance services by reaching out to our partnerships team.

Author

  • Lucas Long

    Lucas Long is co-author of the Amazon best-selling book, Crawl, Walk, Run: Becoming a Privacy-Centric Marketing Organization. He is also the Director of Privacy Strategy at InfoTrust, working with global organizations at the intersection of digital strategy, privacy regulations, and technical data collection architecture. Through these efforts, Lucas helps companies understand their limitations for data enablement due to privacy challenges and design optimal ways to accomplish core use cases in a compliant manner.

    When not discussing the intricacies of GDPR and cookie laws with clients, Lucas enjoys traveling and exploring new cultures, one bite at a time. Based in Barcelona, he is also a presenter, featured at industry events organized by Google, the Digital Analytics Association, the American Marketing Association, and the Journal of Applied Marketing Analytics.

    View all posts
Facebook
Twitter
LinkedIn
Email
Originally Published: April 16, 2021

Subscribe To Our Newsletter

April 16, 2021

Other Articles You Will Enjoy

Facts and Fiction: Third-Party Cookie Deprecation

Facts and Fiction: Third-Party Cookie Deprecation

With third-party cookie deprecation in Chrome just around the corner (now set for the start of 2025), organizations understandably have many questions and misconceptions…

9-minute read
Understanding First, Second, and Third-Party Data

Understanding First, Second, and Third-Party Data

You’re likely already seeing first-party and third-party terminology everywhere you look if you work in analytics, marketing, and all-things digital. But have you heard…

6-minute read
The Privacy Risk of AI: Automated Decision Making and Compliance Considerations

The Privacy Risk of AI: Automated Decision Making and Compliance Considerations

As third-party cookie deprecation is quickly approaching, many platforms are introducing AI capabilities promising greater utility with less data. Organizations can rely on features…

7-minute read
Lessons and Learnings from the Cookieless Now Summit London

Lessons and Learnings from the Cookieless Now Summit London

Today’s marketing and advertising environment can often feel like chaos. Google Chrome deprecating support for third-party cookies, although no true date for when. A…

12-minute read
Safeguarding Tomorrow: The Importance of Evaluating Compliance Risk Today

Safeguarding Tomorrow: The Importance of Evaluating Compliance Risk Today

It happens every day: marketing purchases a new platform with the promise of helping the organization meet and exceed business targets. When it comes…

7-minute read
A South Asian First: Sri Lanka’s Personal Data Protection Act

A South Asian First: Sri Lanka’s Personal Data Protection Act

I know I covered India’s DPDPA first, but, as it turns out, Sri Lanka beat them to the punch. Sri Lanka’s Personal Data Protection…

6-minute read
Chrome Delays Third-Party Cookie Deprecation: What Advertisers Need to Know

Chrome Delays Third-Party Cookie Deprecation: What Advertisers Need to Know

Forgive me if you’ve heard this before … Google Chrome is delaying the deprecation of third-party cookies. After the initial timeline of 2020 (We’re…

5-minute read
Finding the Light: Keys to Competitive Advantage in the Privacy-Centric Era

Finding the Light: Keys to Competitive Advantage in the Privacy-Centric Era

It’s no secret that the 21st century to date has been a boon for advertising. With consumers flocking to the internet for all of…

12-minute read
AdTech DNA Simplifies the Complex for Global Advertisers

AdTech DNA Simplifies the Complex for Global Advertisers

As a global advertiser, knowing what is happening across your organization is an endeavor wrought with complexity.  Are your advertising technologies implemented correctly?  Do…

3-minute read

Get Your Assessment

Thank you! We will be in touch with your results soon.
{{ field.placeholder }}
{{ option.name }}

Talk To Us

Talk To Us

Receive Book Updates

Fill out this form to receive email announcements about Crawl, Walk, Run: Advancing Analytics Maturity with Google Marketing Platform. This includes pre-sale dates, official publishing dates, and more.

Search InfoTrust

Leave Us A Review

Leave a review and let us know how we’re doing. Only actual clients, please.